Initial Commit

vulnbox/nginx/http/prova.conf

@@ -0,0 +1,23 @@
+
+
+    
+server { 
+    listen *:3443 ssl;
+
+    ssl_certificate     /services-keys/ExpressTLS/cert.pem;
+    ssl_certificate_key /services-keys/ExpressTLS/key.pem;
+    ssl_protocols       TLSv1.3;
+
+    location / {
+        proxy_pass http://localhost:3080/;
+    }
+}
+
+server {
+    listen 127.0.0.1:3080;
+
+    location / {
+        proxy_pass https://express-tls:8443/;
+    }
+}
+

vulnbox/nginx/nginx.conf

@@ -0,0 +1,49 @@
+user nginx;
+
+# Set number of worker processes automatically based on number of CPU cores.
+worker_processes auto;
+
+# Load ngx_stream_module
+load_module /usr/lib/nginx/modules/ngx_stream_module.so;
+load_module /usr/lib/nginx/modules/ngx_http_headers_more_filter_module.so;
+
+
+
+
+
+# Enables the use of JIT for regular expressions to speed-up their processing.
+pcre_jit on;
+
+events {
+	# The maximum number of simultaneous connections that can be opened by
+	# a worker process.
+	worker_connections 1024;
+}
+
+http {
+	
+	more_clear_headers Server; 
+
+	# Helper variable for proxying websockets.
+	map $http_upgrade $connection_upgrade {
+		default upgrade;
+		'' close;
+	}
+
+
+	# Specifies the main log format.
+	log_format main '$remote_addr - $remote_user [$time_local] "$request" '
+			'$status $body_bytes_sent "$http_referer" '
+			'"$http_user_agent" "$http_x_forwarded_for"';
+
+
+
+	# Includes virtual hosts configs.
+	include /etc/nginx/http/*.conf;
+}
+
+stream {
+
+	include /etc/nginx/stream*.conf;
+    
+}

vulnbox/nginx/stream/ssl-termination.conf

@@ -0,0 +1,33 @@
+
+upstream backend_ssl_ter {
+    server localhost:3080;
+}
+
+upstream backend {
+    server https://express-tls:8443;
+}
+
+server {
+
+    listen 3443 ssl;
+
+    more_clear_headers Server; 
+
+    proxy_pass backend_ssl_ter;
+
+
+    ssl_certificate       /services-keys/ExpressTLS/cert.pem;
+    ssl_certificate_key   /services-keys/ExpressTLS/key.pem;
+    ssl_protocols TLSv1.3;
+
+
+}
+
+server {
+
+    more_clear_headers Server; 
+
+    listen 3080;
+    proxy_pass backend;
+
+}